CVE-2026-1233192026-11-06In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injectionIn JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injection